News · European Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Serbia’s spyware scandal is also the EU’s problem

At least 14 people in Serbia have been targeted with spyware since the beginning of 2026, according to new findings by EDRi member SHARE Foundation.

Accountability
Sep 23, 2026 Source edri.org
Summary

The targets include members of the student movement, activists, a member of parliament from the opposition party and a local councillor. These findings comecame to light amid growing pressure on Serbia’s pro-democracy movement. The EU’s failure to address spyware at home undermines its credibility in demanding accountability from Serbia. The post Se

How it connects

Related across sources

art 25 Data protection by design and by default Apr 27, 2016 Privacy by Design & Default Privacy by Default Privacy by Design
art 30 Records of processing activities Apr 27, 2016 Processing Accountability
15625/2026 Cass.Civ. - 15625/2026 Istituto nazionale della previdenza sociale (INPS, the controller) is the Italian National Institute for Social Security. In 2021, the DPA fined the controller €300,000 for its… Supreme Court May 21, 2026 Privacy by Design & Default Privacy by Design DPIA
VwGH Ro 2025/04/0007-7 VwGH: €18M DSB fine annulled — GDPR corporate fine requires identified culpable natural The controller was an address publisher and direct advertising company that operated a data application to provide advertisers with personal data for targeted marketing measures.… Jun 24, 2026 Controllers Accountability Personal Data
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Supervision Accountability Data Portability

Full text

At least 14 people in Serbia have been targeted with spyware since the beginning of 2026, according to new findings by EDRi member SHARE Foundation. The targets include members of the student movement, activists, a member of parliament from the opposition party and a local councillor. These findings comecame to light amid growing pressure on Serbia’s pro-democracy movement. The EU’s failure to address spyware at home undermines its credibility in demanding accountability from Serbia.

Related documents